Media Coverage

Researchers at Trend Micro have reported finding a second denial-of-service (DoS) vulnerability in Android’s “mediaserver” component.

Kyle Wilhoit, senior threat researcher at Trend Micro, to break down real attacks against gas pump monitoring systems

“The Russian underground has become an economy of scale,” says Tom Kellermann, Trend Micro’s chief cyber security officer.

Trend Micro has found a flaw that uses a malformed Matroska (MKV) video in apps or websites to crash Android's "mediaserver" service, effectively turning the target device into a paperweight.

“The culture of silence regarding cyber-attacks in Asia serves as fuel to the guild of thieves who operate with impunity in the region,” said Tom Kellermann, chief cybersecurity officer at security software developer Trend Micro Inc. “The deep-seated historical mistrust in the region undermines true collaboration.”

Trend Micro was first to publish three of the Hacking Team Flash bugs. The company’s chief cybersecurity officer Tom Kellermann likens the history of laxness of Adobe’s security practices in light of Flash’s popularity to poisoning the water supply for all of a village’s wells.

“The dark web is impressively expansive and organizations of this size, conducting schemes of this magnitude, are hidden throughout it in unprecedented numbers,” said Trend Micro chief cybersecurity officer, Tom Kellermann. “With the amount of exploit kits on the market today, the financial sector must brace itself for an increased level of more intensified attacks.”

Trend Micro threat analyst Jay Yaneza said the combination of more developers using .NET in applications and the ease by which hackers can find vulnerabilities in open source software has led to a boom in point of sale (POS) malware targeting Microsoft's .NET software.

Hacking Team intrusion malware can also target iOS and Android devices. Here are the dirty details about Android attacks, from Trend Micro. Note that it warns that if you've been infected, it will be extremely difficult to clean the infection yourself. You'll have to have root privilege to the device and get help from your phone's manufacturer to flash the firmware.

On the other hand, the European Union, with its Right to Be Forgotten rules, has a "much more stringent framework than we do in the United States because we let companies get away with a lot more" here, says Paul Ferguson, a senior threat research advisor at Trend Micro.

But that may be a race that it cannot win. Paul Ferguson, senior adviser for Trend Micro, a security software provider, said that information on Ashley Madison, deleted in one online forum, is beginning to bubble up in others. Once something is published on the Internet,” he said, “it’s there forever.”

FBN’s Jo Ling Kent, Liz Claman and Trend Micro Chief Cybersecurity Officer Tom Kellerman discuss the Ashley Madison hack. [Video]

These new findings, which come from the security research company Trend Micro, indicate that Hacking Team build a fake Android news app. It was called "BeNews," which happens to also be the name of another, now defunct news site. It appears that Hacking Team was able to build the fake app so that it looked legitimate enough to be accepted into the Google Play app store. Nestled inside the app's code, however, was a backdoor to make it a mobile spy tool.

In life and in fiction, the numbered Swiss bank account stands as an untouchable repository for funds, legally obtained or otherwise. Modern criminals likewise need a secure repository, not necessarily for funds but for online resources. A recent report from Trend Micro delves deeply into the world of Bulletproof Hosting Service (BPHS) providers. We don't yet know precisely how and where Darkode's resources were stored, but a BPHS was almost certainly involved.

Forums like Darkode represent one leg of the stool that is the problem of criminal hacking, says Tom Kellermann, chief cybersecurity officer at Trend Micro, because these shutdowns send a warning to American cybercriminals that they may be arrested.

Chief Cybersecurity Officer Thomas Kellerman weighs in on the suspension of trading at the NYSE and the latest malware release. (VIDEO)

“A separate attack against one of these vulnerabilities shows that not sharing the discovery of vulnerabilities with the vendor or broader security community leaves everyone at risk,” argued Trend Micro global threat communication manager, Christopher Budd.

SkyBridge Capital founder Anthony Scaramucci, Heritage Foundation Fellow Steve Moore, former FBI agent Bill Daly and Chief Cybersecurity Officer Tom Kellermann discuss the suspension of trading at the NYSE and concerns about cybersecurity and potential cyber-attacks. (VIDEO)

Hacking tools work by relying on using so-called "zero day" bugs -- vulnerabilities unknown to software makers. According a blog post from cybersecurity firm TrendMicro, the cache has so far revealed the company's tools relied on least two problems in Adobe's Flash Player and in Windows itself.

Researchers from antivirus firm Trend Micro said in a blog post that the leaked Hacking Team files contain two exploits for Flash Player, one of which is already known and has been patched, and one for the Windows kernel.

On Tuesday, security firm Trend Micro shared that at least three exploits – two targeting Adobe Flash Player and one targeting Windows kernel – were found in the information dump.

“A separate attack against one of these vulnerabilities shows that not sharing the discovery of vulnerabilities with the vendor or broader security community leaves everyone at risk,” wrote Christopher Budd, global threat communications manager at Trend.

A cyber blackmail ring is targeting the UK with bogus, malware-filled emails pretending to come from big name companies and government bodies. Trend Micro fraud analyst Paul Pajares and senior architect Jon Oliver reported uncovering the scam in a threat advisory.

We enlisted a team of moderators to ask a number of prominent IT security professionals about the challenges they faced as a woman entering the field, the prejudices they deal with every day and the skills they use to navigate within their business.

Recently discovered malware which uses digital steganography to hide itself in .PNG files has been overwhelmingly targeted at US healthcare providers, according to Trend Micro.